Blog
Data Protection Risks for Growing Businesses
Growing businesses are a bit like growing children. The shoes that fit perfectly last spring start to pinch, and nobody notices until they begin to
Your Team Has Done GDPR Training. But Has Any of It Actually Stuck?
Plenty of organisations can say, with confidence, that everyone has completed their UK GDPR training. Fewer can say what would happen if a real data
When a Subject Access Request Is Not Really About the Data
A Subject Access Request (SAR) rarely arrives at a convenient time. For HR teams already dealing with a difficult employment situation, it can feel like
Most GDPR Problems Do Not Start With a Breach
Ask most business owners what GDPR means in practice, and you will likely get one of two answers: paperwork, or panic. Usually, the panic comes
Avoid the Panic: What Happens If You Fail a GDPR Audit (And How to Prevent It)
Is “Failing” a GDPR Audit Really a Thing? Strictly speaking, GDPR audits are not exams. There is no examiner marking your answers, no pass mark,
How to Turn a GDPR Audit Into a Strategic Asset (Not Just a Legal Obligation)
Most organisations know they should carry out a GDPR audit. Far fewer know what to do with it once it is done. The result? A